This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json) Hash identifier: haUO+GCrM2qcb3c2wUN5/AtKDVJ+E+hx9jcf0+skx9E= Subject key identifier: C9:F7:BC:56:24:6F:32:A4:68:4C:4F:9B:6B:9F:18:B7:EA:A4:FA:6F Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a Certificate serial: 019B3A912DEFBF6F1B375B0E99BE18EE4EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:02:31 +0000 Manifest this update: Sat 20 Dec 2025 07:02:31 +0000 Manifest next update: Sun 21 Dec 2025 07:02:31 +0000 Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: MxulSi3Bkwm47OivjDA2wGhLCoTDo8lUoam+lIyugDw=) 2: sA1HdIpnNshvOPJPgaGNIhZrUb8.roa (hash: 7Bi1HUyjDkybQXNM/TN4TmwGL8in9oSgJiNHpva8HX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:2d:ef:bf:6f:1b:37:5b:0e:99:be:18:ee:4e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a Validity Not Before: Dec 20 07:02:31 2025 GMT Not After : Dec 21 07:02:31 2025 GMT Subject: CN=c9f7bc56246f32a4684c4f9b6b9f18b7eaa4fa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:6f:0e:2e:ad:fe:27:72:47:69:ce:e6:be: 3d:ea:94:3a:81:38:63:45:67:78:4f:04:b4:38:74: b9:93:75:03:e6:b3:90:c5:bf:91:11:59:cf:51:13: b8:b7:2a:b2:5f:08:df:26:70:aa:01:c0:4e:30:36: f7:63:3c:b0:28:df:cf:00:63:ce:ba:7f:6f:b3:a7: 07:ec:87:5d:08:de:b0:e5:03:ad:d5:f3:74:7f:01: 26:44:62:a4:13:ff:b3:45:3b:b5:12:fb:90:27:ba: b4:90:d3:97:34:89:9c:06:7f:b3:d0:08:2c:e9:6a: c7:eb:2c:6c:61:0b:06:57:66:e9:e8:10:60:82:7b: 89:50:ec:be:80:ce:6d:dd:38:d6:3f:d1:5a:ca:85: d5:b1:40:62:b1:b1:02:0e:9d:c7:e3:bb:1f:df:b4: 43:72:e1:fc:c5:1e:3b:fe:b9:2b:ff:8a:9b:fc:c8: 25:9b:84:73:7d:5a:26:51:3e:f8:da:0d:b1:4c:da: 2b:15:c4:c5:b0:e7:c0:5a:3f:8d:15:f2:86:8f:f6: 1f:d5:cd:a0:5b:0e:3c:09:dc:6e:8b:f1:9d:8e:93: 83:36:ba:d8:87:3a:f8:ff:93:df:a9:70:d7:cd:d4: 4d:9e:ec:27:31:9e:0f:1b:89:a1:49:69:36:95:cc: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F7:BC:56:24:6F:32:A4:68:4C:4F:9B:6B:9F:18:B7:EA:A4:FA:6F X509v3 Authority Key Identifier: keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dc:b7:54:bc:a9:33:2b:c0:49:bf:1a:d7:85:49:07:7a:3d: 3f:5a:6d:98:d6:6e:02:f0:86:59:85:92:dd:eb:8b:c9:87:9b: d4:41:15:10:47:b2:4f:4c:81:0d:d5:e7:c8:03:e0:8c:33:f2: ee:be:09:b3:4a:e4:37:97:81:24:de:26:78:cd:25:48:09:07: ee:67:dc:c1:b6:d1:fb:56:54:e5:fe:99:72:5d:ea:91:0f:df: 72:27:e8:02:12:f9:39:0c:3d:c5:bb:96:8e:db:73:25:20:33: cf:98:00:62:22:39:ac:2a:8f:61:5e:0a:84:48:5b:be:c7:9c: 3e:6b:fb:78:8d:3c:a5:10:a1:09:f1:17:e9:39:f1:4c:08:85: a0:d5:3e:09:c9:cb:ab:57:b4:46:5f:e8:33:6c:d2:11:a1:cd: 35:98:2a:d1:7d:ca:e9:b0:f6:bc:13:06:38:8f:b4:b0:01:f6: 9d:90:7d:3f:91:d2:45:82:2b:32:c6:fd:f6:b6:5b:6f:56:67: ab:25:8c:15:73:ad:07:2e:a2:a6:17:a4:b7:2d:0c:71:27:00: 48:79:45:01:b9:c1:43:4b:3f:57:2c:02:52:d1:a0:4a:8a:d8: 57:71:0e:dd:ef:a0:eb:46:a2:12:85:da:73:81:6a:56:43:15: 7f:86:37:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kS3vv28bN1sOmb4Y7k7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MDQ2MTA4YjU0MjYxNDQyNDIyYzBmYmM4MGIzZmE5ODZl YmU5M2EwHhcNMjUxMjIwMDcwMjMxWhcNMjUxMjIxMDcwMjMxWjAzMTEwLwYDVQQD EyhjOWY3YmM1NjI0NmYzMmE0Njg0YzRmOWI2YjlmMThiN2VhYTRmYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEBvDi6t/idyR2nO5r496pQ6gThj RWd4TwS0OHS5k3UD5rOQxb+REVnPURO4tyqyXwjfJnCqAcBOMDb3YzywKN/PAGPO un9vs6cH7IddCN6w5QOt1fN0fwEmRGKkE/+zRTu1EvuQJ7q0kNOXNImcBn+z0Ags 6WrH6yxsYQsGV2bp6BBggnuJUOy+gM5t3TjWP9FayoXVsUBisbECDp3H47sf37RD cuH8xR47/rkr/4qb/Mglm4RzfVomUT742g2xTNorFcTFsOfAWj+NFfKGj/Yf1c2g Ww48Cdxui/GdjpODNrrYhzr4/5PfqXDXzdRNnuwnMZ4PG4mhSWk2lcz/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn3vFYkbzKkaExPm2ufGLfqpPpvMB8GA1UdIwQY MBaAFJQEYQi1QmFEJCLA+8gLP6mG6+k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmNlN2QtZmI0Ni00MTljLWFmMWQt OTM5NDkyNGMzYzc2LzEvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zMmNlN2QtZmI0Ni00MTljLWFmMWQtOTM5NDkyNGMzYzc2 LzEvbEFSaENMVkNZVVFrSXNEN3lBc19xWWJyNlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9y3VLyp MyvASb8a14VJB3o9P1ptmNZuAvCGWYWS3euLyYeb1EEVEEeyT0yBDdXnyAPgjDPy 7r4Js0rkN5eBJN4meM0lSAkH7mfcwbbR+1ZU5f6Zcl3qkQ/fcifoAhL5OQw9xbuW jttzJSAzz5gAYiI5rCqPYV4KhEhbvsecPmv7eI08pRChCfEX6TnxTAiFoNU+CcnL q1e0Rl/oM2zSEaHNNZgq0X3K6bD2vBMGOI+0sAH2nZB9P5HSRYIrMsb99rZbb1Zn qyWMFXOtBy6iphekty0McScASHlFAbnBQ0s/VywCUtGgSorYV3EO3e+g60aiEoXa c4FqVkMVf4Y3xQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:59 2025 by rpki-client